stitchkit 0.76.0 → 0.76.2

package/dist/internal/stable-digest.d.ts

@@ -1,3 +1,38 @@
+/**
+ * A stable identity for a call's arguments — one implementation, two callers.
+ *
+ * Two callers need the same thing for different reasons. The MCP round keys a
+ * tool invocation by `(operation, arguments)` so a retry is recognised as the
+ * same round; a watched read keys its shared source by `(operation, arguments)`
+ * so two browsers asking the same question are one read on the server. If those
+ * two computed the key differently, the same arguments would be the same round
+ * and two different watches — and nothing would say so.
+ *
+ * The stability that matters is key order: `{a:1,b:2}` and `{b:2,a:1}` are the
+ * same arguments and `JSON.stringify` disagrees, so a naive key silently splits
+ * one shared source into two whenever a caller builds its object in a different
+ * order. That is not a hypothetical: object literal order follows the source
+ * that wrote it, and two components asking the same question rarely share one.
+ *
+ * ## Why this is not SHA-256
+ *
+ * It was, and that made every watched read fail on an ordinary intranet. Web
+ * Crypto — `crypto.subtle` — exists only in a **secure context**, so a page
+ * served over plain HTTP from a LAN name has no `crypto.subtle` at all and the
+ * first digest throws `Cannot read properties of undefined`. `localhost` is
+ * secure by definition, which is exactly why nothing caught it until a browser
+ * opened the app by its name.
+ *
+ * The fix is not a fallback, it is admitting what this is for: **identity, not
+ * secrecy**. Nothing here resists an adversary — an attacker who can choose your
+ * watch arguments can already ask the question directly. So the requirement is
+ * distribution and determinism, both ends agreeing, and no ambient capability;
+ * a cryptographic hash bought none of that and cost the entire non-secure web.
+ *
+ * Being synchronous is the second thing it buys. A promise for a key made the
+ * first subscription of a question asynchronous, which meant a component could
+ * not be handed a retained value in the same turn it subscribed.
+ */
 /**
  * The value with every object's keys sorted, recursively — arrays keep their
  * order, because in an array order *is* the value.
@@ -7,12 +42,11 @@
  */
 export declare function stableValue(value: unknown): unknown;
 /**
- * A bounded, order-independent digest of a call's arguments.
+ * A bounded, order-independent identity for a call's arguments.
  *
- * SHA-256 over the key-sorted JSON, base64url without padding. Bounded because
- * the key travels on the wire and arguments do not have a bounded size; a hash
- * rather than the JSON itself so a large argument object does not become a
- * large subscription key repeated in every frame.
+ * 128 bits as 32 lowercase hex characters. Deterministic across runtimes and
+ * across both ends of a socket, synchronous, and dependent on no ambient
+ * capability — see the module header for why that last one is the whole point.
  *
  * What it cannot do, stated because the limit is easy to walk into: values
  * `JSON.stringify` drops or transforms — `undefined` members, a `Date`, a `Map`,
@@ -20,5 +54,5 @@ export declare function stableValue(value: unknown): unknown;
  * Contract arguments are parsed JSON, so this is the argument shape by
  * construction; a caller digesting something else has to say what it means.
  */
-export declare function argumentsDigest(args: Record<string, unknown>): Promise<string>;
+export declare function argumentsDigest(args: Record<string, unknown>): string;
 //# sourceMappingURL=stable-digest.d.ts.map

package/dist/internal/stable-digest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stable-digest.d.ts","sourceRoot":"","sources":["../../src/internal/stable-digest.ts"],"names":[],"mappings":"AAkBA;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQnD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAGpF"}
+{"version":3,"file":"stable-digest.d.ts","sourceRoot":"","sources":["../../src/internal/stable-digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQnD;AAyCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGrE"}

package/dist/live/watch-client.d.ts

@@ -44,7 +44,7 @@
  * sense a rendering component can use.
  */
 import type { ContractDef, EndpointDef } from '../contract/define.js';
-import { type WatchKey, type WatchStateFrame } from './watch-contract.js';
+import { WATCH_CLOSE, WATCH_OPEN, WATCH_STATE, WATCH_VALUE, type WatchKey, type WatchStateFrame, type WatchValueFrame } from './watch-contract.js';
 export interface WatchListeners<TValue> {
     value(value: TValue): void;
     /** Phase and, when unhealthy, the read's own code and message. */
@@ -56,11 +56,58 @@ export interface WatchHandle<TValue> {
     /** Drops every listener this handle registered and releases the key. */
     close(): void;
 }
-/** The transport half a watch client needs — a bound realtime client for `watchContract`. */
+/** What the server sends a watcher, by event name. */
+export interface WatchInboundEvents {
+    [WATCH_VALUE]: WatchValueFrame;
+    [WATCH_STATE]: WatchStateFrame;
+}
+/**
+ * A realtime client, as much of one as this adapter needs to see.
+ *
+ * Four members and no types on them, because the point of this shape is that a
+ * *typed* client satisfies it: a bound realtime client's `on` is generic over
+ * the events of the contract it was bound to, and TypeScript will not relate
+ * that signature to any concrete one written here — measured, both with a payload
+ * parameter and with the tuple form the realtime handler actually has.
+ */
+export interface RealtimeClientLike {
+    on: (...args: never[]) => unknown;
+    emit: (...args: never[]) => unknown;
+    request: (...args: never[]) => unknown;
+    onConnectionChange: (...args: never[]) => unknown;
+}
+/**
+ * Hand a bound realtime client to {@link createWatchClient}.
+ *
+ * The guide used to say "pass a bound realtime client" and the types refused it,
+ * which is the worst combination: an instruction that reads as supported and
+ * fails at the call site. This is the conversion, once, in the framework —
+ * rather than the same cast copied into every application that follows the
+ * guide.
+ */
+export declare function watchTransport(client: RealtimeClientLike): WatchTransport;
+/**
+ * The transport half a watch client needs — a realtime client bound to a
+ * contract that carries `watchContract`.
+ *
+ * Written in the protocol's own four event names rather than in `string`, so an
+ * application bringing its own transport knows exactly what to implement.
+ *
+ * A **bound realtime client does not satisfy this shape**, and no phrasing of it
+ * would fix that: its `on` is generic over the events of the contract it was
+ * bound to, and TypeScript will not relate two generic signatures like these.
+ * Pass it through {@link watchTransport}, which is that conversion done once
+ * here instead of once per application.
+ */
 export interface WatchTransport {
-    on(event: string, handler: (payload: never) => void): () => void;
-    emit(event: string, payload: unknown): void;
-    request(event: string, payload: unknown, options: {
+    on<TEvent extends keyof WatchInboundEvents>(event: TEvent, handler: (payload: WatchInboundEvents[TEvent]) => void): () => void;
+    emit(event: typeof WATCH_CLOSE, payload: {
+        key: WatchKey;
+    }): unknown;
+    request(event: typeof WATCH_OPEN, payload: {
+        key: WatchKey;
+        args: unknown;
+    }, options: {
         timeoutMs: number;
     }): Promise<{
         accepted: boolean;

package/dist/live/watch-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"watch-client.d.ts","sourceRoot":"","sources":["../../src/live/watch-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,EAKL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,cAAc,CAAC,MAAM;IACpC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kEAAkE;IAClE,KAAK,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,WAAW,CAAC,MAAM;IACjC,sFAAsF;IACtF,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC;IACzD,wEAAwE;IACxE,KAAK,IAAI,IAAI,CAAC;CACf;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACjE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,OAAO,CACL,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD;;;;;;;OAOG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACzF;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AAuBD,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;KACnE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC;CACzE,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACrE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,MAAM,EAAE,iBAAiB,GACxB,gBAAgB,CAAC,CAAC,CAAC,CAwNrB"}
+{"version":3,"file":"watch-client.d.ts","sourceRoot":"","sources":["../../src/live/watch-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,eAAe,EAErB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,cAAc,CAAC,MAAM;IACpC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kEAAkE;IAClE,KAAK,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,WAAW,CAAC,MAAM;IACjC,sFAAsF;IACtF,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC;IACzD,wEAAwE;IACxE,KAAK,IAAI,IAAI,CAAC;CACf;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IAC/B,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC;IAClC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC;IACpC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC;IACvC,kBAAkB,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC;CACnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,cAAc,CAKzE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,MAAM,SAAS,MAAM,kBAAkB,EACxC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,IAAI,GACrD,MAAM,IAAI,CAAC;IACd,IAAI,CAAC,KAAK,EAAE,OAAO,WAAW,EAAE,OAAO,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC;IACrE,OAAO,CACL,KAAK,EAAE,OAAO,UAAU,EACxB,OAAO,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,EACzC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD;;;;;;;OAOG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACzF;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AAuBD,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI;KACnE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC;CACzE,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACrE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,MAAM,EAAE,iBAAiB,GACxB,gBAAgB,CAAC,CAAC,CAAC,CAgLrB"}

package/dist/live.d.ts

@@ -13,6 +13,6 @@
  * a watched read live in `stitchkit/application`. → ADR 0150.
  */
 export { defineEvents, type EventDecision, type EventDeliveryMode, type EventPayloads, type EventsConfig, type EventsDeclaration, type EventTopicDeclaration, type EventTopicRegistry, type EventTopicsOfMode, type EventUndecided, toRealtimeContract, type WireTopic, } from './live/events.js';
-export { createWatchClient, type TypedWatchClient, type WatchClientConfig, type WatchHandle, type WatchListeners, type WatchTransport, } from './live/watch-client.js';
+export { createWatchClient, type RealtimeClientLike, type TypedWatchClient, type WatchClientConfig, type WatchHandle, type WatchInboundEvents, type WatchListeners, type WatchTransport, watchTransport, } from './live/watch-client.js';
 export { WATCH_CLOSE, WATCH_OPEN, WATCH_STATE, WATCH_VALUE, type WatchKey, WatchKeySchema, type WatchStateFrame, WatchStateSchema, type WatchValueFrame, WatchValueSchema, watchContract, watchKeyString, } from './live/watch-contract.js';
 //# sourceMappingURL=live.d.ts.map

package/dist/live.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../src/live.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,QAAQ,EACb,cAAc,EACd,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,eAAe,EACpB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../src/live.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,KAAK,QAAQ,EACb,cAAc,EACd,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,eAAe,EACpB,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,uBAAuB,CAAC"}

package/dist/live.js

@@ -2,9 +2,6 @@ import {
   LiveStatePhaseSchema,
   LiveStateStopReasonSchema
 } from "./index-35z5h2ty.js";
-import {
-  bytesToBase64Url
-} from "./index-rxfy4cq7.js";
 
 // src/live/events.ts
 import { z } from "zod";
@@ -68,9 +65,36 @@ function stableValue(value) {
   }
   return result;
 }
-async function argumentsDigest(args) {
-  const bytes = new TextEncoder().encode(JSON.stringify(stableValue(args)));
-  return bytesToBase64Url(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)));
+function mix128(input) {
+  let a = 2654435769;
+  let b = 2246822507;
+  let c = 3266489909;
+  let d = 668265263;
+  for (let index = 0;index < input.length; index += 1) {
+    const code = input.charCodeAt(index);
+    a = Math.imul(a ^ code, 2246822519);
+    b = Math.imul(b ^ code, 3266489917);
+    c = Math.imul(c ^ code, 668265263);
+    d = Math.imul(d ^ code, 374761393);
+    a = a << 13 | a >>> 19;
+    b = b << 17 | b >>> 15;
+    c = c << 7 | c >>> 25;
+    d = d << 11 | d >>> 21;
+  }
+  a ^= b >>> 15;
+  b ^= c >>> 13;
+  c ^= d >>> 11;
+  d ^= a >>> 9;
+  return [
+    Math.imul(a ^ a >>> 16, 575075507) >>> 0,
+    Math.imul(b ^ b >>> 13, 2654435761) >>> 0,
+    Math.imul(c ^ c >>> 16, 2246822507) >>> 0,
+    Math.imul(d ^ d >>> 15, 3266489909) >>> 0
+  ];
+}
+function argumentsDigest(args) {
+  const lanes = mix128(JSON.stringify(stableValue(args)) ?? "undefined");
+  return lanes.map((lane) => lane.toString(16).padStart(8, "0")).join("");
 }
 
 // src/live/watch-contract.ts
@@ -116,9 +140,11 @@ function watchKeyString(key) {
 }
 
 // src/live/watch-client.ts
+function watchTransport(client) {
+  return client;
+}
 function createWatchClient(contract, config) {
   const entries = new Map;
-  const digests = new Map;
   const holdMs = config.holdMs ?? 0;
   const openTimeoutMs = config.openTimeoutMs ?? 1e4;
   const service = contract.meta.prefix;
@@ -165,18 +191,6 @@ function createWatchClient(contract, config) {
       open(entry);
     }
   });
-  function cachedDigest(action, args) {
-    return digests.get(`${service}/${action}/${JSON.stringify(stableValue(args))}`);
-  }
-  async function resolveDigest(action, args) {
-    const cacheKey = `${service}/${action}/${JSON.stringify(stableValue(args))}`;
-    const cached = digests.get(cacheKey);
-    if (cached !== undefined)
-      return cached;
-    const digest = await argumentsDigest(args);
-    digests.set(cacheKey, digest);
-    return digest;
-  }
   function entryFor(key, args) {
     const id = watchKeyString(key);
     const existing = entries.get(id);
@@ -243,55 +257,27 @@ function createWatchClient(contract, config) {
   }
   function handleFor(action, args) {
     const mine = new Set;
-    let entry;
-    const known = cachedDigest(action, args);
-    if (known !== undefined)
-      entry = entryFor({ service, action, digest: known }, args);
-    const ready = (async () => {
-      if (entry)
-        return entry;
-      const digest = await resolveDigest(action, args);
-      entry = entryFor({ service, action, digest }, args);
-      return entry;
-    })();
+    const entry = entryFor({ service, action, digest: argumentsDigest(args) }, args);
     return {
       subscribe(listeners) {
         const registered = listeners;
         mine.add(registered);
-        if (entry) {
-          entry.listeners.add(registered);
-          if (entry.hasValue)
-            registered.value(entry.value);
-          registered.state?.(entry.state);
-        }
-        ready.then((target) => {
-          if (!mine.has(registered))
-            return;
-          if (!target.listeners.has(registered)) {
-            target.listeners.add(registered);
-            if (target.hasValue)
-              registered.value(target.value);
-            registered.state?.(target.state);
-          }
-          open(target);
-        });
+        entry.listeners.add(registered);
+        if (entry.hasValue)
+          registered.value(entry.value);
+        registered.state?.(entry.state);
+        open(entry);
         return () => {
           mine.delete(registered);
-          const target = entry;
-          if (!target)
-            return;
-          target.listeners.delete(registered);
-          releaseEntry(target);
+          entry.listeners.delete(registered);
+          releaseEntry(entry);
         };
       },
       close() {
-        const target = entry;
-        if (!target)
-          return;
         for (const listener of mine)
-          target.listeners.delete(listener);
+          entry.listeners.delete(listener);
         mine.clear();
-        releaseEntry(target);
+        releaseEntry(entry);
       }
     };
   }
@@ -302,6 +288,7 @@ function createWatchClient(contract, config) {
   return client;
 }
 export {
+  watchTransport,
   watchKeyString,
   watchContract,
   toRealtimeContract,

package/dist/node.js

@@ -5,7 +5,7 @@ import {
   createHandler,
   createSocketIOServer,
   createUnixClientTransport
-} from "./index-52400rdd.js";
+} from "./index-t8qyvrvg.js";
 import {
   createImplement,
   createImplementRegistry,
@@ -14,8 +14,8 @@ import {
   createScopedImplementRegistry,
   implement,
   implementRegistry
-} from "./index-endzd8sj.js";
-import"./index-e0a57ymn.js";
+} from "./index-vbf2p6me.js";
+import"./index-nemjkxjp.js";
 import"./index-7b188kmz.js";
 import {
   ShutdownOptionsSchema,
@@ -25,8 +25,7 @@ import {
   createServerLifecycle
 } from "./index-3z73fh2c.js";
 import"./index-nt1mp8km.js";
-import"./index-hsz2mmk0.js";
-import"./index-rxfy4cq7.js";
+import"./index-vj3vvpaa.js";
 import {
   AppError,
   appError,

package/dist/observability/index.js

@@ -10,7 +10,7 @@ import {
   redact,
   sanitizePayload,
   truncatePreview
-} from "../index-28jsdwt1.js";
+} from "../index-aczggrty.js";
 import {
   getRequestContext,
   getTraceId,
@@ -21,7 +21,7 @@ import {
   setRequestError,
   setRequestUser,
   wrapInRequestContext
-} from "../index-e0a57ymn.js";
+} from "../index-nemjkxjp.js";
 import {
   childSpan,
   createTraceContext,
@@ -31,8 +31,7 @@ import {
   resolvePropagationContext,
   resolveTraceContext
 } from "../index-nt1mp8km.js";
-import"../index-hsz2mmk0.js";
-import"../index-rxfy4cq7.js";
+import"../index-vj3vvpaa.js";
 import"../index-0w9abg87.js";
 import {
   isRecord

package/dist/primitives.js

@@ -1,7 +1,6 @@
 import {
   ManagedFileRefSchema
-} from "./index-4kp4fxvp.js";
-import"./index-rxfy4cq7.js";
+} from "./index-f6n5n7nz.js";
 import"./index-ksp6e2ye.js";
 
 // src/primitives/audit.ts

package/dist/remote.js

@@ -1,13 +1,12 @@
 import {
   ApiError,
   createClient
-} from "./index-v5dm4bwq.js";
+} from "./index-58jzmnn4.js";
 import"./index-1rxswfbv.js";
 import"./index-nt1mp8km.js";
 import {
   mergeMeta
-} from "./index-hsz2mmk0.js";
-import"./index-rxfy4cq7.js";
+} from "./index-vj3vvpaa.js";
 import {
   AppError
 } from "./index-0w9abg87.js";

package/dist/server/index.js

@@ -13,7 +13,7 @@ import {
   sseRoute,
   streamingRoute,
   webSocketLane
-} from "../index-52400rdd.js";
+} from "../index-t8qyvrvg.js";
 import {
   composeAuthHooks,
   createAuthHook,
@@ -26,7 +26,7 @@ import {
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-65kathdm.js";
+} from "../index-da1aqnhb.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_CORS_EXPOSE_HEADERS,
@@ -40,7 +40,7 @@ import {
   defineMultipartStream,
   implement,
   implementRegistry
-} from "../index-endzd8sj.js";
+} from "../index-vbf2p6me.js";
 import {
   extractIp,
   generateTraceId,
@@ -49,7 +49,7 @@ import {
   isPublicIp,
   resolveSocketIp,
   resolveTraceId
-} from "../index-e0a57ymn.js";
+} from "../index-nemjkxjp.js";
 import {
   isWithinDir,
   realPathWithinDir
@@ -81,8 +81,7 @@ import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES,
   joinRoutePath,
   parseTrailingWildcard
-} from "../index-hsz2mmk0.js";
-import"../index-rxfy4cq7.js";
+} from "../index-vj3vvpaa.js";
 import {
   AppError,
   STITCH_ERROR_STATUS,

package/dist/testing.js

@@ -24,13 +24,12 @@ import {
 import {
   createClient,
   createClients
-} from "./index-v5dm4bwq.js";
+} from "./index-58jzmnn4.js";
 import"./index-1rxswfbv.js";
 import"./index-nt1mp8km.js";
 import {
   joinRoutePath
-} from "./index-hsz2mmk0.js";
-import"./index-rxfy4cq7.js";
+} from "./index-vj3vvpaa.js";
 import"./index-0w9abg87.js";
 import {
   isRecord

package/dist/tool-invoker.js

@@ -1,14 +1,13 @@
 import {
   createToolInvoker
-} from "./index-6wr9f6qm.js";
-import"./index-885chjxq.js";
-import"./index-k68e5jz0.js";
-import"./index-e0a57ymn.js";
+} from "./index-jqtsc9mj.js";
+import"./index-7qy2ex0m.js";
+import"./index-s4c8wy8m.js";
+import"./index-nemjkxjp.js";
 import"./index-22by16v6.js";
 import"./index-cby4ar3v.js";
 import"./index-nt1mp8km.js";
-import"./index-hsz2mmk0.js";
-import"./index-rxfy4cq7.js";
+import"./index-vj3vvpaa.js";
 import"./index-0w9abg87.js";
 import"./index-qyrqwr4c.js";
 import"./index-6k1937bx.js";

package/dist/tools.js

@@ -1,18 +1,18 @@
 import {
   redact
-} from "./index-28jsdwt1.js";
+} from "./index-aczggrty.js";
 import {
   buildToolManifest,
   mountAgent
-} from "./index-xgahrwdf.js";
+} from "./index-ezmn6ac6.js";
 import"./index-3xnq72rz.js";
 import {
   argumentsDigest
-} from "./index-vdvmcy7r.js";
+} from "./index-a916km3r.js";
 import {
   signJwt,
   verifyPkce
-} from "./index-65kathdm.js";
+} from "./index-da1aqnhb.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_PROCESS_SIGNALS,
@@ -20,10 +20,10 @@ import {
   defaultSignalSource,
   guardSignalCallback,
   reportSignalError
-} from "./index-endzd8sj.js";
+} from "./index-vbf2p6me.js";
 import {
   createToolInvoker
-} from "./index-6wr9f6qm.js";
+} from "./index-jqtsc9mj.js";
 import {
   WaitTimeoutError,
   createCli,
@@ -32,10 +32,10 @@ import {
   fetchPinnedDocument,
   readCapped,
   runWaitOperation
-} from "./index-9my2n66s.js";
+} from "./index-s2rchahr.js";
 import {
   collectToolSurface
-} from "./index-9c5dbr5q.js";
+} from "./index-k2zczx1g.js";
 import {
   createRuntimeToolFactory,
   defineRuntimeTool
@@ -44,19 +44,19 @@ import {
   collectTools,
   createToolRunner,
   formatToolError
-} from "./index-885chjxq.js";
+} from "./index-7qy2ex0m.js";
 import {
   ToolExecutionControlError,
   coerceJsonArgs,
   executeToolMethod,
   isToolExecutionControlError,
   toolResultFromError
-} from "./index-k68e5jz0.js";
+} from "./index-s4c8wy8m.js";
 import {
   getRequestContext,
   getTraceId,
   runWithRequestContext
-} from "./index-e0a57ymn.js";
+} from "./index-nemjkxjp.js";
 import {
   ManagedFileError
 } from "./index-bfcpjw20.js";
@@ -79,8 +79,7 @@ import {
 } from "./index-nt1mp8km.js";
 import {
   defineContract
-} from "./index-hsz2mmk0.js";
-import"./index-rxfy4cq7.js";
+} from "./index-vj3vvpaa.js";
 import {
   AppError,
   STITCH_ERROR_STATUS
@@ -1146,7 +1145,7 @@ async function resolveMcpRound(options) {
   });
   const requests = policy.inputRequired;
   const state = options.context.mcpReq.requestState();
-  const digest = await argumentsDigest(options.rawArgs);
+  const digest = argumentsDigest(options.rawArgs);
   if (!state) {
     if (isRecord(options.context.mcpReq.inputResponses)) {
       return failedResolution({

package/llms-full.txt

@@ -7617,9 +7617,17 @@ const hub = createWatchHub({
 
 ```ts
 // browser
-import { createWatchClient } from 'stitchkit/live';
-
-const watch = createWatchClient(notesContract, { transport: live, holdMs: 30_000 });
+import { createWatchClient, watchTransport } from 'stitchkit/live';
+
+// `live` is the bound realtime client. It goes through `watchTransport`, and
+// that is not ceremony: its `on` is generic over the contract it was bound to,
+// and TypeScript will not relate that signature to the one a watch client
+// declares. The conversion lives in the framework so it is written once rather
+// than in every application.
+const watch = createWatchClient(notesContract, {
+  transport: watchTransport(live),
+  holdMs: 30_000,
+});
 
 const handle = watch.list({ folder: 'inbox' });
 const stop = handle.subscribe({
@@ -7649,6 +7657,13 @@ Without that, one address changing wakes every watcher of the operation. Twenty
 conversations open means twenty reads for one change — nineteen of them publish
 nothing, because nothing changed, and the read is paid anyway.
 
+The digest is a plain 128-bit hash computed in JavaScript, on purpose. It used
+to be SHA-256 through Web Crypto, which exists **only in a secure context** — so
+every watched read threw on a page served over plain HTTP from a LAN name, while
+`localhost` (secure by definition) and every test kept saying the code was fine.
+The key identifies a question; it does not protect one, and an attacker who can
+choose your watch arguments can already ask the question directly.
+
 ### Who shares with whom
 
 A key is `(service, action, digest of arguments)`, and everyone on that key gets
@@ -7737,8 +7752,23 @@ point:
   immediately. An event emitted before the memory update is a wake-up to the old
   value.
 
-It is a **resource**, read with `context.use(...)`, not a function you call
-wherever you need it. The kernel resolves its resource graph in the constructor
+Where there is no kernel — a server that binds its own signals and closes what
+it holds in an order it wrote — open it directly instead:
+
+```ts
+const opened = await openKeyspace(sessions, { backend });
+opened.keyspace.get(id);                       // synchronous, from memory
+// on shutdown, in the order you chose:
+opened.stopAdmission();
+await opened.drain();
+await opened.close();
+```
+
+The resource is a thin wrapper over exactly that, so there is one implementation
+and two lifecycles, not two keyspaces.
+
+Where there **is** a kernel it is a **resource**, read with `context.use(...)`,
+rather than a function you call wherever you need it. The kernel resolves its resource graph in the constructor
 and cannot register one afterwards, so a keyspace opened by a bare call inside
 another resource's `start` is never drained, never closed, and never ordered
 against the things that write to it.
@@ -13125,6 +13155,7 @@ realtime contract from `stitchkit`, and the server halves live in `stitchkit/app
 | `EventPayloads` / `EventTopicsOfMode` / `WireTopic` | _types_ | payload map keyed by wire topic, the topics of one mode, and the `prefix.name` a topic is addressed by |
 | `createWatchClient` | function | contract-shaped watch client: `watch.action(args)` returns a ref-counted handle sharing one subscription |
 | `WatchHandle` / `WatchListeners` / `WatchClientConfig` / `WatchTransport` / `TypedWatchClient` | _types_ | subscribe/close, the value and state listeners, hold window and open deadline, and the bound realtime client it rides |
+| `watchTransport` / `RealtimeClientLike` / `WatchInboundEvents` | function / _types_ | hands a bound realtime client to a watch client — two generic signatures TypeScript will not relate, converted once here |
 | `watchContract` | const | the four-event realtime contract a watched read travels on |
 | `WATCH_OPEN` / `WATCH_CLOSE` / `WATCH_VALUE` / `WATCH_STATE` | const | the event names of that contract |
 | `WatchKey` / `WatchKeySchema` / `watchKeyString` | type / schema / function | `(service, action, arguments digest)` — the identity both ends compute the same way |
@@ -13555,6 +13586,7 @@ the function that derives it from a snapshot,
 | Export | Kind | Summary |
 |--------|------|---------|
 | `defineKeyspace` / `keyspaceResource` | function | a named record set read synchronously from memory and written through one serialised chain; backend first, then memory, then the change event |
+| `openKeyspace` / `OpenedKeyspace` | function / type | the same keyspace opened directly, for an application that owns its own lifecycle rather than declaring resources to a kernel |
 | `KeyspaceBackend` / `KeyspaceDeclaration` / `KeyspaceChange` / `KeyspaceResourceConfig` / `OpenKeyspace` | _types_ | the four-method durability port, the declaration, the announced change, the resource's options and the published handle |
 | `memoryKeyspaceBackend` / `sqliteKeyspaceBackend` / `SqliteKeyspaceBackendConfig` | function / type | a disposable in-process backend, and one table with a key and a JSON payload over a caller-owned database |
 | `SqliteDatabase` / `SqliteStatement` / `SqliteValue` | _types_ | the minimal synchronous SQLite boundary the framework types against |